Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
File: qVHmOKLLlcaLvFSicoYFsn9XBoE.mft (raw, json)
Hash identifier: mwGjAUulTNicNy3RGzG/9LwWxu6tGlEPe9TyDmUwJFI=
Subject key identifier: 2B:68:51:0E:E8:70:2D:E4:ED:DA:1E:AE:F6:C0:66:BD:95:AD:F7:A5
Authority key identifier: A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
Certificate issuer: /CN=a951e638a2cb95c68bbc54a2728605b27f570681
Certificate serial: 019D38D35D97E949C5064DAA236771C18D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
Manifest number: 0F46
Signing time: Sun 29 Mar 2026 09:01:09 +0000
Manifest this update: Sun 29 Mar 2026 09:01:09 +0000
Manifest next update: Mon 30 Mar 2026 09:01:09 +0000
Files and hashes: 1: eRjL7bmUuZoWQUIbq4eEp3CN-0M.roa (hash: y5sRxVzTyv3q+thLaOje2bsBoe1cBCrXQcLT//6Uj0k=)
2: qVHmOKLLlcaLvFSicoYFsn9XBoE.crl (hash: IqErPO+VlAYcbD2GMkrO4IharYahPhEO5BJ2qlpniQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:5d:97:e9:49:c5:06:4d:aa:23:67:71:c1:8d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a951e638a2cb95c68bbc54a2728605b27f570681
Validity
Not Before: Mar 29 09:01:09 2026 GMT
Not After : Mar 30 09:01:09 2026 GMT
Subject: CN=2b68510ee8702de4edda1eaef6c066bd95adf7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5a:8e:da:ce:85:b3:e4:6a:09:4c:11:18:7f:
b9:34:c0:f7:12:3a:81:fc:40:4d:8c:36:01:37:84:
88:60:62:6c:f8:c7:59:5d:6b:81:ff:b2:7e:01:0e:
8f:32:6b:b1:56:94:d7:9d:9e:10:d3:06:db:c3:fa:
75:b2:48:23:92:2b:ed:d5:14:f8:a8:94:2e:66:59:
98:91:50:35:f4:00:11:58:30:7d:82:62:31:f2:c9:
8c:e9:7b:4c:ac:0d:9b:5c:02:f7:4c:bb:f1:05:78:
6c:ff:2e:0c:ab:1b:74:4d:0f:35:67:e8:44:c6:37:
0c:8b:f8:5a:73:59:5f:2a:8d:85:1a:c2:26:68:b2:
23:23:aa:d7:40:5d:7e:3f:dc:03:19:e3:66:82:3d:
cf:ba:24:f8:da:09:43:35:a4:b8:6a:52:d5:5f:a4:
51:47:5f:88:45:34:f7:32:ed:7a:82:79:7e:81:05:
27:ac:f5:6d:ae:90:36:1e:36:b8:f2:f3:1d:30:31:
ca:72:f3:0d:e1:9e:db:fb:46:8f:dc:e5:01:c1:57:
dc:da:3f:7f:e0:f7:04:49:37:dd:5f:e5:58:35:ad:
31:f8:8d:83:27:ae:f8:27:a3:4c:24:01:a3:df:3d:
ab:74:25:59:36:ff:2b:91:af:ae:68:21:2f:56:2a:
77:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:68:51:0E:E8:70:2D:E4:ED:DA:1E:AE:F6:C0:66:BD:95:AD:F7:A5
X509v3 Authority Key Identifier:
keyid:A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ee:45:39:e9:cf:a2:03:0b:2d:a4:58:ef:fb:e5:29:83:14:
70:fb:61:cd:a4:69:bc:3f:e1:da:4b:c7:8a:8e:a1:10:f1:c6:
41:75:15:ff:c7:b1:c1:c8:20:af:25:9e:33:3d:a0:48:38:6d:
b2:cc:d9:bc:d6:1e:94:71:79:4a:60:f8:6f:96:1e:43:e6:54:
28:a6:52:9b:9a:53:13:64:76:28:fd:b5:1d:b1:ab:4a:00:87:
14:a2:a9:d0:52:9a:60:ad:bd:a7:91:7f:a3:30:ff:ac:6b:5f:
36:24:58:04:d2:a3:fa:fd:0c:3d:f0:23:b5:80:96:e2:a5:d3:
64:53:30:e7:b0:b3:23:8c:45:c2:24:98:33:13:9b:d5:ff:a5:
54:2c:6a:c3:34:e6:63:3f:a0:0e:b6:f5:69:34:e1:a8:8b:f3:
97:4a:bb:98:d7:d0:a1:00:b1:14:a8:59:c5:b1:1f:56:61:00:
14:bc:ec:3e:57:eb:14:12:22:76:5a:b0:f6:a2:00:c8:13:68:
2d:3a:18:5a:ea:79:ac:0d:b5:af:d8:a8:d3:47:f8:2b:e8:d5:
63:01:5e:34:fe:75:75:61:78:e5:8c:8e:60:c5:37:5b:78:a2:
0a:cc:b2:14:6a:e2:ed:76:da:3f:0c:ac:f6:f2:6c:de:03:46:
ba:b6:6b:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04012X6UnFBk2qI2dxwY0qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NTFlNjM4YTJjYjk1YzY4YmJjNTRhMjcyODYwNWIyN2Y1
NzA2ODEwHhcNMjYwMzI5MDkwMTA5WhcNMjYwMzMwMDkwMTA5WjAzMTEwLwYDVQQD
EygyYjY4NTEwZWU4NzAyZGU0ZWRkYTFlYWVmNmMwNjZiZDk1YWRmN2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVqO2s6Fs+RqCUwRGH+5NMD3EjqB
/EBNjDYBN4SIYGJs+MdZXWuB/7J+AQ6PMmuxVpTXnZ4Q0wbbw/p1skgjkivt1RT4
qJQuZlmYkVA19AARWDB9gmIx8smM6XtMrA2bXAL3TLvxBXhs/y4Mqxt0TQ81Z+hE
xjcMi/hac1lfKo2FGsImaLIjI6rXQF1+P9wDGeNmgj3PuiT42glDNaS4alLVX6RR
R1+IRTT3Mu16gnl+gQUnrPVtrpA2Hja48vMdMDHKcvMN4Z7b+0aP3OUBwVfc2j9/
4PcESTfdX+VYNa0x+I2DJ674J6NMJAGj3z2rdCVZNv8rka+uaCEvVip3PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtoUQ7ocC3k7doervbAZr2VrfelMB8GA1UdIwQY
MBaAFKlR5jiiy5XGi7xUonKGBbJ/VwaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDZlNzktZWQyYi00M2Q1LWI0YzEt
YWJkZjkwNmM1YWRlLzEvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mMDZlNzktZWQyYi00M2Q1LWI0YzEtYWJkZjkwNmM1YWRl
LzEvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+5FOenP
ogMLLaRY7/vlKYMUcPthzaRpvD/h2kvHio6hEPHGQXUV/8exwcggryWeMz2gSDht
sszZvNYelHF5SmD4b5YeQ+ZUKKZSm5pTE2R2KP21HbGrSgCHFKKp0FKaYK29p5F/
ozD/rGtfNiRYBNKj+v0MPfAjtYCW4qXTZFMw57CzI4xFwiSYMxOb1f+lVCxqwzTm
Yz+gDrb1aTThqIvzl0q7mNfQoQCxFKhZxbEfVmEAFLzsPlfrFBIidlqw9qIAyBNo
LToYWup5rA21r9io00f4K+jVYwFeNP51dWF45YyOYMU3W3iiCsyyFGri7XbaPwys
9vJs3gNGurZrhA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:03 2026 by rpki-client